Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: Lnccmp1KqWPbWtlbttllP5BMdT2jKEz4Bez/muk6kIM=
Subject key identifier: CB:5B:88:21:14:D0:45:0D:1F:13:D2:AB:BD:FE:DC:41:B6:01:22:F8
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 0196CFBDE3C47726DDBD96A38DD760FFADC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 137E
Signing time: Wed 14 May 2025 17:00:50 +0000
Manifest this update: Wed 14 May 2025 17:00:50 +0000
Manifest next update: Thu 15 May 2025 17:00:50 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: w0uib0OR0YFDc8JCT2nwqdJcKd7jTJxk8zUtlXhaJAM=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:e3:c4:77:26:dd:bd:96:a3:8d:d7:60:ff:ad:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: May 14 17:00:50 2025 GMT
Not After : May 15 17:00:50 2025 GMT
Subject: CN=cb5b882114d0450d1f13d2abbdfedc41b60122f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:31:99:a2:ad:8a:ee:ab:20:9e:a9:2f:97:
fe:4f:5e:86:03:34:c2:85:bb:49:2f:57:c0:a2:69:
29:26:03:1a:59:44:1b:40:7e:ed:87:af:4b:ec:5b:
40:4b:9b:17:4a:4c:4c:7b:d9:f0:a7:27:28:78:68:
50:16:79:08:f0:66:93:d3:26:88:1d:f9:04:48:d4:
fc:eb:59:53:ff:b8:84:95:46:65:3c:9c:b1:a6:2f:
f3:26:e1:11:00:bb:3c:61:bd:ef:8e:db:dd:d8:b3:
bf:1c:52:58:5c:f9:42:fa:ac:c5:30:0a:17:56:05:
d1:53:43:58:0a:86:25:fb:63:68:c3:48:64:40:26:
0a:26:ba:1a:f7:39:b2:61:73:f9:76:7d:ab:a5:4a:
23:2e:2f:c8:73:28:fc:ff:00:44:ba:68:7c:40:24:
6b:c9:99:f8:e1:4a:19:10:f5:d2:43:f9:c1:bb:73:
f5:a4:7f:ad:2c:23:24:8d:99:40:6e:7b:4e:96:c2:
66:01:60:90:c7:aa:eb:d9:71:7d:85:68:2b:cd:21:
f6:8f:75:93:2f:24:bc:6a:d5:f5:43:28:cb:be:fe:
37:93:53:63:10:ff:f2:f0:14:7f:a0:d1:e4:95:7b:
02:14:87:0a:22:a5:4e:9a:98:ca:16:bd:a1:53:00:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5B:88:21:14:D0:45:0D:1F:13:D2:AB:BD:FE:DC:41:B6:01:22:F8
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:05:2c:58:16:78:0c:54:90:67:c8:74:de:34:08:49:b9:79:
29:7d:25:c8:85:77:3e:43:db:5d:8b:84:30:56:a7:f1:23:c3:
b8:ae:04:9b:6a:a0:e8:86:92:2e:c2:f4:60:8f:2b:dc:a9:8e:
9d:be:3c:02:80:dc:57:ad:51:ce:85:0f:f0:95:28:43:02:e6:
29:5e:a1:1b:8b:e7:6b:14:06:51:85:1a:63:9b:56:fa:e6:bd:
41:bb:64:5d:a2:c4:f2:05:73:56:a8:85:7f:1c:05:62:bd:93:
44:18:44:d9:5d:ac:39:b2:a4:52:11:29:9b:6a:77:9e:81:47:
d0:0b:05:90:04:89:1a:5b:09:52:54:37:79:b9:46:1c:02:8b:
84:43:c8:85:78:7e:f3:8c:74:6b:51:f9:d8:6a:50:da:1b:75:
38:3f:63:65:dd:4f:5c:ac:f8:93:cc:7a:40:51:2b:e6:69:c1:
74:60:f4:ee:2e:7a:87:3d:19:68:30:dd:ea:ea:a1:15:fd:e7:
ae:da:d4:cd:b6:16:76:27:5d:50:d5:29:e7:29:14:18:37:a6:
77:56:1a:e3:19:44:c5:89:56:ed:e3:ec:73:55:4d:9d:3b:a0:
d1:26:06:45:63:b3:6f:f0:f5:e9:c0:1e:a6:96:fe:b2:8d:bb:
19:87:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:23:20 2025 by rpki-client